NVD

Id
49310  
Name
CVE-2009-2048  
Description
Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-07-16  
Modified Date
2009-08-12  
Seq
2009-2048  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
249662 49310 CVE-2009-2048 20090715 Vulnerabilities in Unified Contact Center Express Administration Pages  View
249663 49310 CVE-2009-2048 35705  View
249664 49310 CVE-2009-2048 1022569  View
249665 49310 CVE-2009-2048 ADV-2009-1913  View
249666 49310 CVE-2009-2048 unified-ccx-interface-xss(51730)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41666 JVNDB-2009-002673 Cisco Unified CCX サーバの CRS 内にある管理インターフェイスにおけるクロスサイトスクリプティングの脆弱性 Cisco Unified Contact Center Express (Cisco Unified CCX) サーバの Cisco Customer Response Solutions (CRS) 内にある管理インターフェイスには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-2048 39479 CVE-2009-2048 49310 3.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002673.html 2009-07-15 2011-06-14 View